Cybersecurity Engineer (SMA 5)

We are looking for a highly skilled and experienced Cybersecurity Engineer to join our team supporting the Congressional Budget Office (CBO) under the SENTRY Blanket Purchase Agreement (BPA). As a Cybersecurity Engineer, you will design, implement, and maintain enterprise security controls that enforce Zero Trust principles, including identity-centric access, least privilege enforcement, continuous monitoring, and threat detection across cloud, network, and endpoint environments. You will ensure that security technologies, systems, and services are properly configured, hardened, and continuously monitored in accordance with federal security standards and industry best practices., * Security Operations: Support the implementation, operation, and optimization of enterprise security platforms and services, ensuring protection, availability, and performance across cloud, on-premises, and hybrid environments.

• Security Architecture: Implement and maintain enterprise security controls aligned with NIST SP 800-53 and NIST SP 800-207 (Zero Trust Architecture); enforce Zero Trust principles, including continuous verification, identity-centric security, and least privilege access.
• Identity & Access Management: Configure and manage identity services, including authentication, authorization, role-based access controls, and multi-factor authentication; support privileged access management (PAM) and conditional access policies.
• Threat Detection & Incident Response: Monitor, analyze, and respond to security events and alerts using enterprise security tools (SIEM, EDR/XDR); support incident triage, containment, investigation, and remediation activities.
• Vulnerability Management: Support vulnerability scanning, assessment, and remediation efforts across systems and applications; coordinate patching and mitigation activities to ensure compliance and risk reduction.
• Cloud Security: Assist in securing cloud platforms (AWS, Azure) and application environments, including configuration management, secure integrations, and enforcement of security best practices.
• Documentation: Maintain accurate and up-to-date documentation of security configurations, processes, and procedures to ensure compliance, audit readiness, and operational continuity.

• Clearance: Must be eligible to obtain and maintain a Public Trust Tier 2 clearance (background check conducted through U.S. Capitol Police).
• Experience: Minimum of 8-10 years of progressively responsible experience in enterprise cybersecurity engineering.
• Technical Proficiency: Demonstrated hands-on experience with:
• Microsoft Entra ID (Azure Active Directory), MFA, SSO, PAM, RBAC, Conditional Access
• Microsoft Defender for Endpoint, EDR/XDR
• Microsoft Sentinel (SIEM) or equivalent platforms
• Enterprise firewalls, IDS/IPS, VPN technologies, WAF
• Cloud security (AWS, Azure) and hybrid environments
• Network segmentation and micro-segmentation
• Cybersecurity Knowledge: Strong knowledge of NIST SP 800-53, NIST SP 800-207 (Zero Trust Architecture), and FISMA compliance requirements.
• Change Management: Experience supporting formal change management processes, including security impact analysis.

Desired Experience:

• Experience with Tenable Security Center and vulnerability management.
• Experience leading cybersecurity initiatives, incident response, and security architecture projects.
• Experience supporting continuous, real-time security monitoring and 24/7 operations.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent professional experience).
• Certifications such as CISSP, CISM, or equivalent are preferred.

Clearance Requirement: Must be eligible for a Public Trust Tier 2